Update yarl requirement from >=1.7.2 to >=1.24.2

[dependabot]

Updates the requirements on yarl to permit the latest version.

Release notes

Sourced from yarl's releases.

1.24.2

Contributor-facing changes

• Switched the aarch64 and armv7l wheel builds to GitHub's native ARM runners. The aarch64 wheels now build without QEMU emulation, and armv7l runs on aarch64 hosts so its 32-bit ARM execution is far cheaper than the previous aarch64-on-x86_64 path -- by :user:bdraco.

  Related issues and pull requests on GitHub: #1724.

• Restored per-runner native arches in the Windows wheel matrix on tag releases. The previous CIBW_ARCHS_WINDOWS=AMD64 ARM64 setting made both windows-latest and windows-11-arm cross-compile the other arch, producing two artifacts with identically-named wheels whose bytes differed; the deploy job's download-artifact ... merge-multiple step tore those writes together, yielding a wheel that PyPI rejected with 400 Invalid distribution file. ZIP archive not accepted: Mis-matched data size during the 1.24.0 and 1.24.1 releases -- by :user:bdraco.

  Related issues and pull requests on GitHub: #1725.

---

Changelog

Sourced from yarl's changelog.

v1.24.2

(2026-05-19)

Contributor-facing changes

• Switched the aarch64 and armv7l wheel builds to GitHub's native ARM runners. The aarch64 wheels now build without QEMU emulation, and armv7l runs on aarch64 hosts so its 32-bit ARM execution is far cheaper than the previous aarch64-on-x86_64 path -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:1724.

• Restored per-runner native arches in the Windows wheel matrix on tag releases. The previous CIBW_ARCHS_WINDOWS=AMD64 ARM64 setting made both windows-latest and windows-11-arm cross-compile the other arch, producing two artifacts with identically-named wheels whose bytes differed; the deploy job's download-artifact ... merge-multiple step tore those writes together, yielding a wheel that PyPI rejected with 400 Invalid distribution file. ZIP archive not accepted: Mis-matched data size during the 1.24.0 and 1.24.1 releases -- by :user:bdraco.

  Related issues and pull requests on GitHub: :issue:1725.

---

v1.24.1

(2026-05-19)

Contributor-facing changes

• Allowed re-running the deploy job after a partial release failure: the Make Release step now skips when the GitHub Release already exists, and the PyPI publish step uses skip-existing so dists that were already uploaded on a prior attempt do not break the retry -- by :user:bdraco.

... (truncated)

Commits

• d7d5867 Release 1.24.2 (#1726)
• df6f4fa ci: build aarch64 and armv7l wheels on native ARM runners (#1724)
• 229e624 ci: pin CIBW_ARCHS_WINDOWS per runner to avoid wheel name collisions (#1725)
• 10de971 Release 1.24.1 (#1723)
• e6d1b8d Make the deploy job re-runnable after a partial release failure (#1721)
• 98425c2 ci: fall back to plain build frontend for odd-arch wheels (#1720)
• a9aa975 Release 1.24.0 (#1719)
• 8c35b6a Allow optional 'v' prefix in release head_line regex (#1718)
• 0b434a6 Pass PIP="uv pip" to make .develop in aiohttp workflow (#1717)
• c11af79 Switch the aiohttp workflow to astral-sh/setup-uv (#1716)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)